Whakaaetanga Tukatuka Raraunga

rōpū

Ko tēnei Whakaaetanga Tukatuka Raraunga (“DPA” “Whakaaetanga” rānei) e whakaaetia ana e, ā, i waenganui i a:

Kaiwhakahaere Raraunga (“Kaiwhakahaere” “Kaihoko” rānei)

Kaitukatuka Raraunga (“Kaitukatuka” “Xygeni rānei”):

Ko te Kaiwhakahaere me te Kaiwhakahaere Pūtukatuka ka kiia takitahitia i raro nei he "Rōpū" ā, ko ngā "Rōpū" katoa.

Ko tēnei DPA he wāhanga o te Whakaaetanga Ratonga Matua, o ngā Ture Ratonga rānei ("Whakaaetanga Matua") i waenganui i ngā Rōpū e whakahaere ana i te whakarato a Xygeni i tana haumarutanga tono me software supply chain security ngā ratonga ("Ngā Ratonga"). Mēnā ka puta he taupatupatu i waenganui i tēnei DPA me te Whakaaetanga Matua, ka mana tēnei DPA mō ngā take tiaki raraunga.

1. Tautuhinga

Mō ngā kaupapa o tēnei DPA:

• “GDPR” ko te tikanga ko te Ture (EU) 2016/679 o te Pāremata Pākehā me te Kaunihera o te 27 o Paenga-whāwhā 2016 mō te tiaki i ngā tāngata tūturu e pā ana ki te tukatuka raraunga whaiaro.
• "LOPDGDD" tikanga Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y karantía de los derechos digitales.
• "Ngā Raraunga Whaiaro", "Te Tukatuka", "Kaiwhakahaere", "Kaiwhakahaere", "Kaituku-iti", "Kaupapa Raraunga", "Mana Whakahaere", "Te Takahi Raraunga Whaiaro" me whai tikanga kua hoatu ki a rātou i roto i te GDPR.
• “Raraunga Kiritaki” ko te tikanga ko ngā Raraunga Whaiaro katoa i tukuna mai e te Kaiwhakahaere, i runga rānei i te ingoa o te Kaiwhakahaere ki ngā Ratonga, i tukatukahia rānei e te Kaitukatuka i runga i te ingoa o te Kaiwhakahaere e pā ana ki ngā Ratonga.
• “Tukatuka-roto” ko te tikanga ko tētahi rōpū tuatoru e whakamahia ana e te Kaitukatuka, me te whakamanatanga o mua mai i te Kaiwhakahaere (e ai ki te whakamāramatanga i roto i te Wāhanga 7), hei tukatuka i ngā Raraunga Kaihoko mō te Kaiwhakahaere.
• "Ngā SCC" tikanga o te Standard Ngā Wāhanga Kirimana mō te whakawhiti raraunga whaiaro ki ngā whenua tuatoru i raro i te GDPR, i whakaaetia e te Komihana Pākehā e Whakatinana ana i te Decision (EU) 2021/914 o te 4 o Hune 2021.
• “Ratonga” tikanga o te application security posture management, software supply chain security, te kimi ngoikoretanga me ngā ratonga e pā ana i tukuna e Xygeni ki te Kaiwhakahaere i raro i te Whakaaetanga Matua.
• "Ture Tiaki Raraunga e Pā Ana" ko te tikanga ko te GDPR, ko te LOPDGDD, me ētahi atu ture tiaki raraunga ā-motu e tika ana kia whakatikatikaina i ia wā, i ia wā.

2. Ngā Tūranga o ngā Rōpū

E whakaae ana, e whakaae ana hoki ngā Rōpū:

• Ko te Kaiwhakahaere te kaiwhakahaere raraunga e pā ana ki ngā Raraunga Kaihoko, ā, ko ia te kawenga mō te whakatau i ngā kaupapa me ngā tikanga mō te tukatuka i ngā Raraunga Kaihoko i tukuna ki ngā Ratonga.
• Ko te Kaiwhakahaere te kaiwhakahaere raraunga e pā ana ki ngā Raraunga a te Kaihoko, ā, ka tukatukahia e ia aua raraunga i runga i te ingoa o te Kaiwhakahaere, ā, i runga anō i ngā tohutohu kua tuhia.
• Me whakatutuki e ia Rōpū āna herenga i raro i te Ture Tiaki Raraunga e tika ana i roto i tana tūranga hei Kaiwhakahaere, hei Kaitukatuka rānei.

Ina tukatukahia e Xygeni ngā raraunga whaiaro mō āna ake kaupapa (hei tauira, te whakahaere pūkete, te nama, te tātari whakapai ratonga), ka mahi ia hei Kaiwhakahaere motuhake. Ko taua tukatuka ka whakahaeretia e te Kaupapahere Tūmataiti a Xygeni, ā, kei waho i te whānuitanga o tēnei DPA.

3. Kaupapa, Āhua me te Kaupapa o te Tukatuka

Ko te kaupapa, te āhua, te roa me te kaupapa o te tukatuka, tae atu ki ngā momo Raraunga Whaiaro i tukatukahia me ngā kāwai o ngā Kaupapa Raraunga, kua whakatakotoria i roto i te Āpitihanga 1 (Ngā Taipitopito Tukatuka) ki tēnei DPA.

Me tukatuka e te Kaitukatuka ngā Raraunga a te Kaihoko ki te whānuitanga e tika ana hei whakarato i ngā Ratonga kua whakaahuatia i roto i te Whakaaetanga Matua, ā, e ai ki ngā tohutohu kua tuhia e te Kaiwhakahaere, ki te kore e hiahiatia kia pērā e te ture e pā ana. I roto i taua āhuatanga, me whakamōhio e te Kaitukatuka te Kaiwhakahaere i taua whakaritenga ture i mua i te tukatuka, ki te kore e aukatia e te ture i runga i ngā take nui e pā ana ki te painga o te marea.

4. Ngā Tohutohu a te Kaiwhakahaere

Ka tohutohu te Kaiwhakahaere i te Kaitukatuka kia tukatuka i ngā Raraunga Kaihoko ina hiahiatia hei: (a) whakarato i ngā Ratonga e ai ki te Whakaaetanga Matua; (b) whakatutuki i ngā tohutohu a te Kaiwhakahaere i tukuna ā-tuhi i ia wā, i ia wā; me te (c) whakatutuki i ngā herenga a te Kaitukatuka i raro i tēnei DPA.

Me whakamōhio wawe te Kaituku ki te Kaiwhakahaere mēnā, ki te whakaaro tika a te Kaituku, ka takahia e te tohutohu a te Kaiwhakahaere te Ture Tiaki Raraunga e tika ana. Mēnā he pēnei, ka whai mana te Kaituku ki te whakamutu i te tukatuka i raro i taua tohutohu kia whakamāramahia rā anō e te Kaiwhakahaere, kia whakarerekētia rānei te tohutohu.

E whakamana ana te Kaiwhakahaere, ā, e whakaatu ana hoki: (a) he pūtake ture tika tōna i raro i te GDPR Art. 6 (ā, ki te tika, Art. 9) mō te tukatuka i ngā Raraunga Whaiaro e tika ana; (b) kua whakaratohia e ia ngā pānui katoa e hiahiatia ana, ā, kua whiwhi i ngā whakaaetanga katoa e hiahiatia ana; ā (c) kāore te whakawhiti i ngā Raraunga Kaihoko ki te Kaitukatuka e takahi i tētahi ture e tika ana.

5. Ngā Herenga a te Kaitukatuka

5.1 Ngā here tukatuka

Me tukatuka e te Kaitukatuka ngā Raraunga Kaihoko i runga i ngā tohutohu kua tuhia e te Kaiwhakahaere, ki te kore e hiahiatia kia pērā e te ture o te EU, e te ture rānei o te Whenua Mema. Kaua te Kaitukatuka e tukatuka i ngā Raraunga Kaihoko mō āna ake kaupapa, e whakaatu rānei ki ngā rōpū tuatoru engari ki te mea e tika ana hei whakarato i ngā Ratonga, e hiahiatia ana rānei e te ture.

5.2 Matatapu

Me whakarite e te Kaitukatuka kei te whai mana ngā tāngata whai mana ki te tukatuka i ngā Raraunga Kaihoko commiti whakawhirinaki ki te noho muna, i raro rānei i tētahi herenga ture tika mō te noho muna. Ko te urunga atu ki ngā Raraunga Kaihoko ka herea ki ngā kaimahi, ki ngā kaimahi kirimana me ngā kaimahi tukatuka iti e hiahia ana ki te urunga atu hei whakarato i ngā Ratonga.

5.3 Ngā mahi haumaru

Me whakatinana e te Kaitukatuka, me pupuri hoki i ngā mahi hangarau me ngā mahi whakahaere e tika ana hei tiaki i ngā Raraunga Kaihoko mai i te tukatuka kore whakamanatanga, ture kore rānei, me te ngaronga, te whakangaromanga, te kino, te whakarerekētanga, te whakaaturanga tūpono rānei, me te whai whakaaro ki:

• te āhua o te mahi toi me ngā utu mō te whakatinanatanga;
• te āhua, te whānuitanga, te horopaki me ngā kaupapa o te tukatuka;
• ngā mōrearea ki ngā tika me ngā herekoretanga o ngā tāngata tūturu, inā koa mai i te whakangaromanga tūpono, te ngaronga, te whakarerekētanga, te whakaaturanga kore whakamanatanga, te urunga atu rānei ki ngā Raraunga Kaihoko i tukuna, i rongoatia, i tukatukahia rānei i tētahi atu huarahi.

Me whakauru atu ki roto i ēnei tikanga, i te iti rawa, ngā mea kua whakatakotoria i roto i te Āpitihanga 2 (Ngā Tikanga Haumarutanga Hangarau me te Whakahaere) o tēnei DPA. Mā te tiwhikete ISO 27001 a te Kaituku e whakaatu he taunakitanga mō tētahi pūnaha whakahaere haumarutanga mōhiohio taketake. Me pupuri tonu e te Kaituku te tiwhikete ISO 27001, te mea ōrite rānei, puta noa i te wā o tēnei DPA.

5.4 Ngā Mana Kaupapa Raraunga

Me āwhina te Kaitukatuka i te Kaiwhakahaere mā te whakamahi i ngā tikanga hangarau me ngā tikanga whakahaere e tika ana, ki te taea, hei whakatutuki i te herenga a te Kaiwhakahaere ki te whakautu ki ngā tono mō ngā mahi.cisngā mana o ngā Kaupapa Raraunga i raro i te Ture Tiaki Raraunga e tika ana (tae atu ki ngā mana uru, whakatikatika, muku, here, kawe me te whakahē i raro i ngā Ture 15–22 o te GDPR).

Me: (a) whakamōhio wawe te Kaiwhakahaere mēnā ka whiwhi te Kaiwhakahaere i tētahi tono mai i tētahi Kaupapa Raraunga e pā ana ki ngā Raraunga a te Kaihoko; (b) kaua e whakautu ki aua tono engari i runga i ngā tohutohu kua tuhia e te Kaiwhakahaere, i runga rānei i ngā whakaritenga a te ture e pā ana; me (c) whakarato āwhina whaitake ki te Kaiwhakahaere ki te whakautu ki aua tono i roto i ngā rā kati ture e pā ana (30 rā i raro i te GDPR Art. 12).

5.5 Āwhina ki ngā herenga a te Kaiwhakahaere

Me āwhina te Kaitukatuka i te Kaiwhakahaere ki te whakarite kia tutukihia ngā herenga i raro i ngā Ture 32–36 o te GDPR, me te whai whakaaro ki te āhua o te tukatuka me ngā mōhiohio e wātea ana ki te Kaitukatuka, tae atu ki:

• te haumarutanga o te tukatuka (Tuhinga 32);
• whakamōhiotanga mō ngā Takahi Raraunga Whaiaro ki te mana whakahaere me te whakapā atu ki ngā Kaupapa Raraunga (Ngā Ture 33–34);
• ngā aromatawai pānga tiaki raraunga me te whakawhitiwhiti kōrero i mua (Ngā Ture 35–36).

5.6 Te muku, te whakahoki rānei i ngā raraunga

Ina mutu, ina pau rānei te Whakaaetanga Matua, i runga rānei i te tono a te Kaiwhakahaere, me muku, me whakahoki rānei e te Kaiwhakahaere ngā Raraunga Kaihoko katoa kei a ia, i runga i te whiriwhiri a te Kaiwhakahaere, ā, me muku ngā tārua o nāianei, ki te kore e hiahiatia ana e te ture o te EU, o te Kāwanatanga Mema rānei te rokiroki o ngā Raraunga Whaiaro. Me whakaū te Kaiwhakahaere i te otinga o te mukunga mā te tuhituhi i roto i ngā rā 30 o te whakaoho e tika ana.

Pūtukatuka standard ka pā te rārangi pupuri raraunga (kua whakatakotoria ki te Rārangi 1) ki te kore te Kaiwhakahaere e tono wawe kia mukua.

5.7 Arotake me te whakaatu i te tutuki i ngā whakaritenga

Me whakarato e te Kaiwhakahaere ngā mōhiohio katoa e tika ana hei whakaatu i te tutuki i ngā herenga kua whakatakotoria i roto i tēnei DPA, ā, me whakaae kia whakahaerehia ngā arotakenga e te Kaiwhakahaere, e tētahi kaitātari rānei kua whakahaua e te Kaiwhakahaere, me te whai wāhi atu ki ēnei arotakenga.

Ka taea e te Kaiwhakahaere te whakatutuki i tēnei herenga mā te whakarato:

• he tārua o tana tiwhikete ISO 27001 o nāianei, o tana pūrongo SOC 2 Type II rānei (ina whiwhia);
• te whakaoti i te pātai haumarutanga a te Kaiwhakahaere (i roto i ngā rā pakihi 10 o te whiwhinga);
• ngā arotakenga whaitake i te papaanga i muri i te 30 rā i mua i te tuku panui tuhituhi, i raro i te utu a te Kaiwhakahaere, kaua e neke atu i te kotahi i te tau maramataka (ki te kore he whakapae whaitake mō te kore tutuki i ngā whakaritenga).

6. Pānui mō te Takahi Raraunga Whaiaro

Me whakamōhio te Kaitukatuka ki te Kaiwhakahaere i roto i ngā haora 48 i muri i te mōhio ki tētahi Takahia Raraunga Whaiaro e pā ana ki ngā Raraunga Kaihoko. Me whakauru atu ki taua whakamōhiotanga, ki te whānuitanga e wātea ana i taua wā:

• he whakaahuatanga mō te āhua o te Takahia o ngā Raraunga Whaiaro, tae atu ki ngā kāwai me te maha tata o ngā Kaupapa Raraunga e pā ana, me ngā kāwai me te maha tata o ngā tuhinga Raraunga Whaiaro e pā ana;
• te ingoa me ngā taipitopito whakapā o te āpiha tiaki raraunga, o tētahi atu pūwāhi whakapā rānei e taea ai te tiki atu i ētahi atu pārongo;
• he whakaahuatanga mō ngā hua pea o te Takahia o ngā Raraunga Whaiaro;
• he whakaahuatanga o ngā mahi kua mahia, kua whakaarohia rānei kia mahia hei whakatika i te Takahia o ngā Raraunga Whaiaro, tae atu ki, mēnā e tika ana, ngā mahi hei whakaiti i ngā pānga kino ka pā mai.

Mena kāore e taea te whakarato i ngā mōhiohio katoa o runga ake nei i te wā kotahi, ka taea te whakarato i ngā mōhiohio i roto i ngā wāhanga me te kore e whakaroa. Me mahi tahi te Kaiwhakahaere me te Kaiwhakahaere, ā, me mahi i ngā mahi e tika ana e hiahiatia ana e te Kaiwhakahaere hei āwhina i te rangahau, te whakaiti me te whakatika i te takahi.

E whakaae ana ngā Rōpū ko te herenga i raro i te Ture 33 o te GDPR ki te whakamōhio atu ki te mana whakahaere whai mana (Agencia Española de Protección de Datos — AEPD, tētahi atu mana whakahaere rānei) i roto i ngā haora 72 i muri i te mōhio ki tētahi Takahia Raraunga Whaiaro kei te Kaiwhakahaere hei kaiwhakahaere raraunga. Ko te whakamōhiotanga a te Kaitukatuka ki te Kaiwhakahaere i raro i tēnei Wāhanga he mea whakarite kia taea ai e te Kaiwhakahaere te whakatutuki i tēnei herenga ture. Ehara te whakamōhiotanga a te Kaitukatuka i te whakaae ki te hapa, ki te nama rānei.

7. Ngā Pūtukatuka-iti

7.1 Whakamanatanga whānui

Ka tukuna e te Kaiwhakahaere te mana whānui ki te Kaitukatuka ki te whakamahi i ngā Kaitukatuka-iti e rārangihia ana i roto i te Āpitihanga 3 (Ngā Kaitukatuka-iti Kua Whakaaetia) ki tēnei DPA. Me whakatakoto e te Kaitukatuka ki ia Kaitukatuka-iti ngā herenga tiaki raraunga e rite ana ki ngā mea kua whakatakotoria i roto i tēnei DPA, inā koa te whakarato i ngā taurangi e ranea ana hei whakatinana i ngā mahi hangarau me ngā mahi whakahaere e tika ana.

7.2 Ngā Huringa ki ngā Pūtukatuka-iti

Me whakamōhio te Kaitukutuku ki te Kaiwhakahaere mō ngā huringa e whakaarohia ana mō te tāpiri, te whakakapi rānei i ngā Kaitukutuku-iti mā te: (a) whakahou i te rārangi Kaitukutuku-iti kua whakaputaina ki https://xygeni.io/legal/subprocessors me te rā "Whakahōu Whakamutunga" kua whakahoutia; me te (b) tuku pānui tuhituhi ki te Kaiwhakahaere i te iti rawa tekau (10) ngā rā i mua i te whai mana o te huringa. Ka taea e te Kaiwhakahaere te whakahē ki te huringa i runga i ngā take tiaki raraunga whaitake i roto i ngā rā e whitu (7) o taua whakamōhiotanga. Mena ka whakahē te Kaiwhakahaere, ā, kāore e taea e ngā Rōpū te whakatau i te whakahē, ka taea e te Kaiwhakahaere te whakamutu i te Whakaaetanga Matua i runga i te pānui whaitake me te kore whiu.

Mena ka whakamahia e te Kaitukatuka tētahi Kaitukatuka-iti, ka noho tonu te Kaitukatuka ki te Kaiwhakahaere mō te whakatutukitanga o ngā herenga a taua Kaitukatuka-iti ki te kore e tutuki i te Kaitukatuka-iti ana herenga tiaki raraunga.

7.3 Ngā whakaritenga whakahekenga o te tukatuka-iti

Mō ia Kaitukatuka-iti, me:

• whakahaere i ngā mahi tirotiro tika i mua i te whakamahi i te Kaitukatuka-iti;
• whakauru ki tētahi whakaaetanga tukatuka raraunga ā-tuhi e whakatakoto ana i ngā herenga tiaki raraunga kāore i iti iho te tiaki i ērā o roto i tēnei DPA;
• kia rite ngā mahi haumarutanga a te Kaitukatuka-iti ki ngā mea e hiahiatia ana i raro i te Rārangi 5.3 me te Āpitihanga 2;
• whakaurua ngā herenga whakamōhiotanga takahi ture e hiahia ana kia whakamōhio te Kaitukatuka-iti ki te Kaitukatuka i roto i ngā haora 24 i muri i te mōhio ki tētahi Takahanga Raraunga Whaiaro, kia taea ai e te Kaitukatuka te whakatutuki i tana herenga whakamōhiotanga 48-hāora ki te Kaiwhakahaere.

8. Whakawhitinga Ao

Kāore te Kaitukatuka e tuku Raraunga Kiritaki ki tētahi whenua i waho o te Rohe Ōhanga o Ūropi (EEA) mēnā kāore:

• kua whakaaetia e te Komihana o Ūropi he ture e tika ana mōcismō taua whenua i raro i te Ture 45 o te GDPR; rānei
• kua whakatinanahia ngā ārai tika i runga anō i te Ture 46 o te GDPR, tae atu ki, engari kāore i te herea ki, ngā Standard Ngā Wāhanga Kirimana i whakaaetia e te Komihana o Ūropi e Whakatinana ana i te Decision (EU) 2021/914 o te 4 o Hune 2021 (“Ngā SCC”).

Mēnā e hiahiatia ana ngā SCC, me whakahaere e te Kaitukutuku, i runga i te tono a te Kaiwhakahaere, ngā SCC e tika ana me te Kaiwhakahaere me/ranei te Kaitukutuku-iti e tika ana. Ko te kōwae e tika ana mō ngā SCC ko te Kōwae Tuarua (Kaitukutuku ki te Kaitukutuku) mō ngā whakawhiti mai i te Kaiwhakahaere ki te Kaitukutuku, me te Kōwae Tuatoru (Kaitukutuku ki te Kaitukutuku-iti) mō ngā whakawhiti whakamua e te Kaitukutuku ki ngā Kaitukutuku-iti.

Ko te mana tirotiro whai mana mō ngā kaupapa o ngā SCC ko te Tari Tiaki Raraunga Pāniora (Agencia Española de Protección de Datos — AEPD), ki te kore e whakaaetia i roto i te tuhituhi.

Me pupuri e te Kaitukatuka, ā, me tuku atu ki te Kaiwhakahaere, ina tonoa, he rēkoata o nāianei o ngā whakawhiti katoa o ngā Raraunga Kaihoko ki tāwāhi me te tikanga whakawhiti e tika ana mō ia mea.

9. Ngā Aromatawai Pānga Tiaki Raraunga

Mena ka puta he tūponotanga nui ki ngā tika me ngā herekoretanga o ngā tāngata tūturu i roto i tētahi mahi tukatuka, ā, me whakahaere e te Kaiwhakahaere he Aromatawai Pānga Tiaki Raraunga (DPIA) i raro i te Ture 35 o te GDPR, me whakarato e te Kaitukatuka he āwhina me ngā mōhiohio e tika ana ki te Kaiwhakahaere kia taea ai e te Kaiwhakahaere te whakahaere i te DPIA. Me whakautu te Kaitukatuka ki ngā tono e tika ana mō te DPIA a te Kaiwhakahaere i roto i ngā rā pakihi 15.

10. Ngā Rekoata o Ngā Mahi Tukatuka

Me pupuri e te Kaitukatuka, i runga i te tono a te Kaiwhakahaere, he rēkoata o ngā mahi tukatuka i mahia mō te Kaiwhakahaere i runga anō i te Ture GDPR 30(2), tae atu ki: te ingoa me ngā taipitopito whakapā o te Kaitukatuka me ngā Kaitukatuka-iti; ngā kāwai tukatuka i mahia mō te Kaiwhakahaere; ngā whakawhiti Raraunga Whaiaro ki tētahi whenua tuatoru; me te whakaahuatanga whānui o ngā mahi haumaru hangarau me te whakahaere.

11. Taunahatanga

Ko te kawenga o ia Rōpū ki tētahi atu i raro i tēnei DPA, i roto rānei i te hononga ki tēnei, ka pā ki ngā herenga me ngā ārai kua whakatakotoria i roto i te Whakaaetanga Matua. Mēnā kua pāngia tētahi Kaupapa Raraunga e te kino nā te tukatuka e takahi ana i te Ture Tiaki Raraunga e tika ana, ka whai kawenga ia Rōpū mō te kino i puta mai i tana tukatuka e takahi ana i te GDPR i runga anō i ngā Ture 82–83 o te GDPR. Kāore he mea i roto i tēnei Wāhanga e whakawhāiti ana i te kawenga o tētahi o ngā Rōpū ki ngā Kaupapa Raraunga i raro i te ture e tika ana.

12. Term me te Whakamutua

Ka tīmata tēnei DPA i te rā o te Whakaaetanga Matua (i te rā rānei i whakatinanahia ai tēnei DPA mēnā he mea o muri mai) ā, ka mau tonu tōna mana mō te roanga o te Whakaaetanga Matua. Mēnā ka mutu te Whakaaetanga Matua mō tētahi take, ka mutu aunoa tēnei DPA.

Whai muri i te whakamutua, ka mau tonu ngā herenga a te Kaitukatuka i raro i te Wāhanga 5.6 (te mukunga, te whakahokinga rānei i ngā raraunga) ā, me whakaoti e te Kaitukatuka te mukunga, te whakahokinga rānei i ngā Raraunga Kaihoko i roto i ngā rā 30 o te whakamutua. Ka mau tonu hoki ngā wāhanga e pā ana ki te noho muna, te nama, te ture whakahaere me te arotake i muri i te whakamutua.

13. Te Ture Whakahaere me te Mana Whakahaere

Ka whakahaerea tēnei DPA e ngā ture o Pāniora, ā, ka whakamāramatia hoki i runga anō i ngā ture. Ka tuku ngā Rōpū ki te mana whakahaere kore-motuhake o ngā kōti o Madrid mō te whakatau i tētahi tautohe e puta mai ana i tēnei DPA, e pā ana rānei ki tēnei DPA. Mēnā ka taupatupatu tētahi wāhanga o tēnei DPA ki ngā SCC, ka mana ngā SCC.

14. He rerekē

Whakaaetanga Katoa: Ko tēnei DPA, me ōna Rārangi Kupu me te Whakaaetanga Matua, te whakaaetanga katoa i waenganui i ngā Rōpū e pā ana ki te kaupapa o tēnei tuhinga, ā, ka whakakapi i ngā whakaaetanga, ngā māramatanga, ngā whakaaturanga rānei o mua e pā ana ki te tukatuka raraunga.

Whakatikatika: Ka taea anake te whakarerekē i tēnei DPA mā te whakaaetanga tuhituhi kua hainatia e ngā māngai whai mana o ngā Rōpū e rua.

Taumaha: Mena ka whakatauhia he kore mana, he kore rānei e taea te whakamana i tētahi wāhanga o tēnei DPA, ka noho tonu ngā wāhanga e toe ana me te mana katoa.

Te Hiranga: Mēnā ka puta he taupatupatu i waenganui i tēnei DPA me ngā Rārangi Kaupapa, ka toa te tinana o te DPA mēnā kāore i te tino whakamāramahia tētahi atu mea e te Rārangi Kaupapa. Mēnā ka puta he taupatupatu i waenganui i tēnei DPA me ngā SCC (mēnā e tika ana), ka toa ngā SCC.

WHĀRANGI 1 — Ngā Taipitopito Tukatuka

1. Kaupapa

Ko te kaupapa o te tukatuka ko te whakarato a Xygeni o application security posture management, software supply chain security tātari, kitenga ngoikoretanga, CI/CD te aroturukitanga haumarutanga, me ngā ratonga e pā ana e whakaahuatia ana i roto i te Whakaaetanga Matua.

2. Te Āhua o te Tukatuka

Te kohikohi, te whakarite, te hanga, te rokiroki, te tātari, te whakahoki mai, te whakamahi, te whakaatu mā te tuku, te whakataurite, te whakakotahi rānei, te here, te muku, te whakangaro rānei i ngā Raraunga Kaihoko.

3. Te Kaupapa o te Tukatuka

Ko te Tukatuka Raraunga a te Kaihoko ka mahia mō te kaupapa anake o te whakarato Ratonga ki te Kaiwhakahaere, tae atu ki: te kimi me te ripoata i ngā ngoikoretanga haumarutanga; te tātari mōrearea mekameka tuku pūmanawa; CI/CD pipeline security te aroturuki; te kimi i ngā āhuatanga rerekē; me te tautoko kiritaki.

4. Te Roanga o te Tukatuka

Me tukatuka e te Kaitukatuka ngā Raraunga a te Kaihoko mō te roanga o te Whakaaetanga Matua. Ina mutu, me pupuri e te Kaitukatuka ngā Raraunga a te Kaihoko mō ngā marama e 3 i muri i te rā mutunga o te ohaurunga i mua i te mukunga, ki te kore te Kaiwhakahaere e tono kia mukua wawetia. Ka puritia ngā raraunga pūkete whakamātautau mō te 1 marama i muri i te paunga o te whakamātautau.

5. Ngā Momo Raraunga Whaiaro

6. Ngā Kāwai o ngā Kaupapa Raraunga

Ko ngā Kaupapa Raraunga ko: ngā kaimahi, ngā kaimahi kirimana, me ētahi atu kaiwhakamahi whai mana o te Kaiwhakahaere e uru atu ana ki ngā Ratonga; ngā kaituku (ngā kaiwhakawhanake, ngā pūkete karetao, ngā kaihoko hanga) ki ngā putunga raraunga me pipelinee aroturukitia ana e ngā Ratonga; me ngā māngai me ngā tāngata whakapā o te Kaiwhakahaere.

7. Raraunga Kāwai Motuhake

Kāore ngā Ratonga i hangaia hei tukatuka i ngā raraunga whaiaro o tētahi kāwai motuhake e ai ki te whakamāramatanga i roto i te Ture 9 o te GDPR. Ka whakamanahia e te Kaiwhakahaere e kore e tukuna ngā raraunga whaiaro o tētahi kāwai motuhake ki ngā Ratonga me te kore he whakaaetanga tuhituhi i mua i a Xygeni me te whakatinanatanga o ngā parenga tāpiri e tika ana.

WHĀRANGI 2 — Ngā Mahi Haumaru Hangarau me te Whakahaere

Ka whakatinanahia e Xygeni ngā mahi hangarau me ngā mahi whakahaere e whai ake nei hei tiaki i ngā Raraunga Kaihoko, e rite ana ki te pūnaha whakahaere haumarutanga mōhiohio kua whakamanahia e ISO 27001 a Xygeni:

Mana Mana

• Te mana uru e hangai ana ki ngā tūranga (RBAC) e whakatinanahia ana puta noa i ngā pūnaha katoa e tukatuka ana i ngā Raraunga Kaihoko.
• E hiahiatia ana te manatoko maha-tauwehe (MFA) mō ngā kaimahi katoa o Xygeni e uru atu ana ki ngā pūnaha whakaputa.
• Ka pā te mātāpono o te mana iti rawa ki ngā pūkete kaiwhakamahi katoa; ka arotakehia ngā mana uru ia toru marama.
• Motuhēhēnga e hangai ana ki te kī SSH mō te urunga ki te tūmau whakaputa; kua monoa te motuhēhēnga kupuhipa.

Whakamuna Raraunga

• Ko ngā Raraunga Kaihoko ka whakamunahia i te wā e tukuna ana mā te whakamahi i te TLS 1.2, teitei ake rānei.
• Ko ngā Raraunga Kaihoko kua whakamunahia i te wā e okioki ana mā te whakamahi i te AES-256, i tētahi atu mea rite rānei.
• Ngā kī whakamuna e whakahaerehia ana mā te AWS Key Management Service (KMS).

Haumarutanga whatunga

• Ngā pūnaha whakaputa e manaakihia ana i roto i te AWS Virtual Private Cloud (VPC) me te wehewehenga whatunga.
• Kua whakatinanahia te Pātūahi Taupānga Tukutuku (WAF) mō ngā pūwāhi e anga atu ana ki te marea.
• Kua whakatūria ngā pūnaha kite me te aukati i te urutomo.
• Te matawai i ngā ngoikoretanga me te whakamātautau urunga auau o ngā paparanga hanganga me ngā taupānga.

Te Haumaru Tinana

• Ko ngā Raraunga Kaihoko e tiakina ana i roto i ngā pokapū raraunga AWS me ngā tiwhikete SOC 2 Momo II me ISO 27001.
• Ko te urunga ā-tinana ki ngā whare pokapū raraunga he mea here ki ngā kaimahi AWS whai mana whai mana whakahaere koiora anake.

Te Wātea me te Manawanui

• Ngā tārua aunoa o ia rā o ngā Raraunga Kaihoko katoa, ka puritia mō te iti rawa o te 7 rā.
• Ka manatokohia te pono o te tārua i ia wā.
• Disastkua tuhia, kua whakamatautauria hoki ngā tukanga whakaora i ia tau.

Whakahaere aitua

• I puritia, i whakamatautauria hoki te mahere urupare mō ngā aituā haumarutanga i ia tau.
• Ka aro turukihia, ka tuhia hoki ngā kaupapa haumarutanga; ka arotakehia ngā whakatūpato e te wāhanga whakahaere haumarutanga.
• Kua whakatakotoria ngā tikanga whakamōhiotanga mō te takahi raraunga whaiaro hei whakatutuki i te herenga whakamōhiotanga 48-hāora ki te Kaiwhakahaere.

kaimahi

• Ko ngā kaimahi katoa o Xygeni e whai wāhi atu ana ki ngā Raraunga Kaihoko ka herea e ngā herenga muna.
• Ka whakahaerehia he whakangungu mō te mōhiotanga ki te haumarutanga mā ngā kaimahi katoa i ia tau.
• I whakahaerehia ngā arowhai papamuri mō ngā kaimahi e whai wāhi ana ki ngā pūnaha whakaputa, ki te whānuitanga e whakaaetia ana e te ture e pā ana.

Whakahaere Tuatoru

• I aromatawaihia ngā kai-tukatuka iti mō te tutuki i ngā whakaritenga haumarutanga i mua i te whakaurunga.
• Ngā whakaaetanga tukatuka raraunga kei te whai mana me ngā Kaitukatuka-iti katoa.

Tiwhikete

• Kei a Xygeni te tiwhikete ISO 27001 (pūnaha whakahaere haumarutanga mōhiohio).
• Kei te whai a Xygeni i te tiwhikete SOC 2 Momo II; ka tukuna te tiwhikete ki te Kaiwhakahaere ina oti.